7.8

CVE-2023-28464

hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 6.1.25
Linux ≫ Linux Kernel Version 6.2.12
Linux ≫ Linux Kernel Version 6.3 Update -
Linux ≫ Linux Kernel Version 6.3 Update rc1
Linux ≫ Linux Kernel Version 6.3 Update rc2
Linux ≫ Linux Kernel Version 6.3 Update rc3
Linux ≫ Linux Kernel Version 6.3 Update rc4
Linux ≫ Linux Kernel Version 6.3 Update rc5
Linux ≫ Linux Kernel Version 6.3 Update rc6
Netapp ≫ H300s Firmware Version -
Netapp ≫ H410c Firmware Version -
Netapp ≫ H410s Firmware Version -
Netapp ≫ H500s Firmware Version -
Netapp ≫ H700s Firmware Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.194
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-415 Double Free

The product calls free() twice on the same memory address.

https://lore.kernel.org/lkml/20230309074645.74309-1-wzhmmmmm%40gmail.com/
Patch
Mailing List
https://security.netapp.com/advisory/ntap-20230517-0004/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/03/28/2
Patch
Mailing List
https://www.openwall.com/lists/oss-security/2023/03/28/3
Mailing List